Lucene search
+L

733 matches found

OSV
OSV
added 2022/03/10 5:44 p.m.8 views

UBUNTU-CVE-2021-4095

A NULL pointer dereference was found in the Linux kernel's KVM when dirty ring logging is enabled without an active vCPU context. An unprivileged local attacker on the host may use this flaw to cause a kernel oops condition and thus a denial of service by issuing a KVMXENHVMSETATTR ioctl. This fl...

5.5CVSS6.7AI score0.00387EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2021/11/17 12:0 a.m.15 views

PT-2021-8162 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a null pointer dereference in the i40e component of the Linux kernel. This occurs when synchronizing VSI filters, potentially allowing an attacker to cause a...

8.4CVSS6.5AI score0.08555EPSS
SaveExploits6References1639
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.23 views

SUSE: Security Advisory (SUSE-SU-2018:3332-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.7AI score0.04782EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2019/07/30 9:16 a.m.7 views

kernel: dereferencing NULL payload with nonzero length

A flaw was found in the implementation of associative arrays where the addkey systemcall and KEYCTLUPDATE operations allowed for a NULL payload with a nonzero length. When accessing the payload within this length parameters value, an unprivileged user could trivially cause a NULL pointer...

5.5CVSS6.6AI score0.00452EPSS
SaveExploits0References4
Veracode
Veracode
added 2019/05/02 4:41 a.m.30 views

Denial Of Service (DoS)

kernel-rt is vulnerable to denial of service. A local user is able to crash the process in a divide-by-zero error and kernel oops by reading TCP stats...

4.7CVSS6.9AI score0.00486EPSS
SaveExploits1References26Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/03/27 12:0 a.m.35 views

openSUSE Security Update : xen (openSUSE-2019-1046) (Foreshadow)

This update for xen fixes the following issues : Update to Xen 4.10.2 bug fix release bsc1027519. Security vulnerabilities fixed : - CVE-2018-19961, CVE-2018-19962: Fixed an issue related to insufficient TLB flushing with AMD IOMMUs, which potentially allowed a guest to escalate its privileges, m...

8.8CVSS7.1AI score0.08101EPSS
SaveExploits0References22
Tenable Nessus
Tenable Nessus
added 2018/12/31 12:0 a.m.53 views

openSUSE Security Update : xen (openSUSE-2018-1624) (Foreshadow)

This update for xen fixes the following issues : Update to Xen 4.10.2 bug fix release bsc1027519. Security vulnerabilities fixed : - CVE-2018-19961, CVE-2018-19962: Fixed an issue related to insufficient TLB flushing with AMD IOMMUs, which potentially allowed a guest to escalate its privileges, m...

8.8CVSS7.1AI score0.08101EPSS
SaveExploits0References22
Tenable Nessus
Tenable Nessus
added 2018/10/31 12:0 a.m.29 views

openSUSE Security Update : xen (openSUSE-2018-1331) (Foreshadow)

This update for xen fixes the following issues : XEN was updated to the Xen 4.9.3 bug fix only release bsc1027519 - CVE-2018-17963: qemudeliverpacketiov accepted packet sizes greater than INTMAX, which allows attackers to cause a denial of service or possibly have unspecified other impact...

9.8CVSS7.5AI score0.08101EPSS
SaveExploits0References14
Tenable Nessus
Tenable Nessus
added 2018/10/29 12:0 a.m.324 views

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2018:3490-1) (Foreshadow)

This update for xen fixes the following issues : XEN was updated to the Xen 4.9.3 bug fix only release bsc1027519 CVE-2018-17963: qemudeliverpacketiov accepted packet sizes greater than INTMAX, which allows attackers to cause a denial of service or possibly have unspecified other impact. bsc11110...

9.8CVSS7.3AI score0.08101EPSS
SaveExploits0References20
Tenable Nessus
Tenable Nessus
added 2018/10/24 12:0 a.m.34 views

SUSE SLES12 Security Update : xen (SUSE-SU-2018:3332-1)

This update for xen fixes the following issues : CVE-2018-17963: qemudeliverpacketiov accepted packet sizes greater than INTMAX, which allows attackers to cause a denial of service or possibly have unspecified other impact. bsc1111014 CVE-2018-15468: The DEBUGCTL MSR contains several debugging...

9.8CVSS6.7AI score0.04782EPSS
SaveExploits0References8
OSV
OSV
added 2018/07/03 12:0 a.m.6 views

UBUNTU-CVE-2018-13094

An issue was discovered in fs/xfs/libxfs/xfsattrleaf.c in the Linux kernel through 4.17.3. An OOPS may occur for a corrupted xfs image after xfsdashrinkinode is called with a NULL bp...

5.5CVSS6.7AI score0.02179EPSS
SaveExploits1References11
CNVD
CNVD
added 2018/06/29 12:0 a.m.7 views

Linux kernel memory misreference vulnerability (CNVD-2018-16259)

Linux kernel is the kernel used by Linux, an open source operating system released by the Linux Foundation in the U.S. The ntfs.ko filesystem driver is one of the drivers that supports the NTFS filesystem. A memory misreference vulnerability exists in the 'ntfsreadlockedinode' function of the...

5.5CVSS5.2AI score0.00404EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2018/06/28 2:29 p.m.43 views

CVE-2018-12930

ntfsendbufferasyncread in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause a denial of service kernel oops or panic or possibly have unspecified other impact via a crafted ntfs filesystem...

7.8CVSS7.2AI score0.00427EPSS
SaveExploits0References2
NVD
NVD
added 2018/06/28 2:29 p.m.20 views

CVE-2018-12929

ntfsreadlockedinode in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a use-after-free read and possibly cause a denial of service kernel oops or panic via a crafted ntfs filesystem...

5.5CVSS5.8AI score0.00404EPSS
SaveExploits0References4
Prion
Prion
added 2018/06/28 2:29 p.m.23 views

Double free

ntfsreadlockedinode in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a use-after-free read and possibly cause a denial of service kernel oops or panic via a crafted ntfs filesystem...

4.9CVSS5.3AI score0.00404EPSS
SaveExploits0References4Affected Software2
Prion
Prion
added 2018/06/28 2:29 p.m.18 views

Stack overflow

ntfsattrfind in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause a denial of service kernel oops or panic or possibly have unspecified other impact via a crafted ntfs filesystem...

7.2CVSS7.8AI score0.00426EPSS
SaveExploits0References4Affected Software2
Debian CVE
Debian CVE
added 2018/06/28 2:0 p.m.64 views

CVE-2018-12931

ntfsattrfind in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause a denial of service kernel oops or panic or possibly have unspecified other impact via a crafted ntfs filesystem...

7.8CVSS7.8AI score0.00426EPSS
SaveExploits0
Cvelist
Cvelist
added 2018/06/28 2:0 p.m.36 views

CVE-2018-12931

ntfsattrfind in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause a denial of service kernel oops or panic or possibly have unspecified other impact via a crafted ntfs filesystem...

7.9AI score0.00426EPSS
SaveExploits0References4
OSV
OSV
added 2017/10/30 8:29 p.m.4 views

DEBIAN-CVE-2017-1000255

On Linux running on PowerPC hardware Power8 or later a user process can craft a signal frame and then do a sigreturn so that the kernel will take an exception interrupt, and use the r1 value from the signal frame as the kernel stack pointer. As part of the exception entry the content of the signa...

5.5CVSS6.5AI score0.00382EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2017/10/12 10:19 a.m.32 views

CVE-2017-15274

A flaw was found in the implementation of associative arrays where the addkey systemcall and KEYCTLUPDATE operations allowed for a NULL payload with a nonzero length. When accessing the payload within this length parameters value, an unprivileged user could trivially cause a NULL pointer...

5.5CVSS5.1AI score0.00452EPSS
SaveExploits0References1
Rows per page
Query Builder